CVE-2021-24494

CVE-2021-24494 affects the WordPress plugin WP Offload SES Lite (before 1.4.5). The vulnerability stems from not escaping certain fields on the Activity page of the admin dashboard (e.g., email id, subject, recipient), allowing a Stored XSS when an attacker can control those fields (for example v...